@polymer/polymer - npm Package Compare versions

Comparing version 3.5.0 to 3.5.1

lib/mixins/element-mixin.js

@@ -27,3 +27,3 @@ /**
  */
-export const version = '3.5.0';
+export const version = '3.5.1';
 
@@ -30,0 +30,0 @@ export const builtCSS = window.ShadyCSS && window.ShadyCSS['cssBuild'];

lib/mixins/properties-changed.js

@@ -534,3 +534,9 @@ /**
       } else {
-        node.setAttribute(attribute, str);
+        node.setAttribute(
+            attribute,
+            // Closure's type for `setAttribute`'s second parameter incorrectly
+            // excludes `TrustedScript`.
+            (str === '' && window.trustedTypes) ?
+                /** @type {?} */ (window.trustedTypes.emptyScript) :
+                str);
       }
@@ -537,0 +543,0 @@ }

package.json

 {
   "name": "@polymer/polymer",
-  "version": "3.5.0",
+  "version": "3.5.1",
   "description": "The Polymer library makes it easy to create your own web components. Give your element some markup and properties, and then use it on a site. Polymer provides features like dynamic templates and data binding to reduce the amount of boilerplate you need to write",
@@ -5,0 +5,0 @@ "main": "polymer-element.js",

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1308639

increased by0.06%

Lines of code

23830

increased by0.03%

Number of medium supply chain risk alerts

0

decreased by-100%

No dependency changes